Trojan.Win32.Wecod.jdpo removal instruction

The Trojan.Win32.Wecod.jdpo is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Wecod.jdpo virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.Win32.Wecod.jdpo?


File Info:
name: 8064770DE91EEA8ED817.mlw
path: /opt/CAPEv2/storage/binaries/c10ed3cd246dbf285da5ea54b81404d3155b89da0bab3c757908ebc4d64773dc
crc32: 2E35A0F4
md5: 8064770de91eea8ed8171ba595b92bc6
sha1: ccfef8b09a54831402aa4e4b1d37d22821a2fb90
sha256: c10ed3cd246dbf285da5ea54b81404d3155b89da0bab3c757908ebc4d64773dc
sha512: 0153e53a7365a9ae7dfb238c3db98fd01b1399331405d94e9a0fc7a97ce1c76367fa133674d1fb9e49e5004922457aa9ee2d1ec79d4ebffb1719ee869b63c50e
ssdeep: 3072:joZ0J8F0MvH8X0jE8+23+UoLuwM+i8VVo345pJpj:2rF1vS0jF+FUoLuMVVHJpj
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C7B4271176408071E3590731591AF6E04AA9AE3D16D4E58FF2787F3A6E322E36B7324F
sha3_384: a49ffae7f6720021c8d04c6325fec13d319b1a4692a77c7e54b607594523f7e147e561d7bb0c213edeeb642b8de4d3fe
ep_bytes: fe5e5f75085e5f5de9643f0000f7c703
timestamp: 2013-08-01 06:47:19

Version Info:
0: [No Data]

Trojan.Win32.Wecod.jdpo also known as:

MicroWorld-eScan	Gen:Variant.Cerbu.174119
ClamAV	Win.Malware.Urelas-9859364-0
ALYac	Gen:Variant.Cerbu.174119
Zillya	Trojan.Wecod.Win32.15354
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005a3fb91 )
K7GW	Trojan ( 005a3fb91 )
Cybereason	malicious.de91ee
Baidu	Win32.Trojan.Urelas.d
Cyren	W32/Agent.FWJ.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent_AGen.AUL
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Wecod.jdpo
BitDefender	Gen:Variant.Cerbu.174119
Avast	Win32:Evo-gen [Trj]
Tencent	Trojan.Win32.CardSpy.16000130
Emsisoft	Gen:Variant.Cerbu.174119 (B)
VIPRE	Gen:Variant.Cerbu.174119
McAfee-GW-Edition	BehavesLike.Win32.Generic.hz
FireEye	Gen:Variant.Cerbu.174119
Sophos	Generic ML PUA (PUA)
GData	Win32.Trojan.PSE.13IJRMU
MAX	malware (ai score=89)
Antiy-AVL	Trojan/Win32.Wecod
Xcitium	TrojWare.Win32.Urelas.SEE@5443e3
Arcabit	Trojan.Cerbu.D2A827
ZoneAlarm	Trojan.Win32.Wecod.jdpo
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
AhnLab-V3	Trojan/Win.Generic.R580895
McAfee	GenericRXVS-OG!8064770DE91E
TACHYON	Trojan/W32.Agent.532480.UQ
Malwarebytes	Malware.AI.1963903536
Rising	Trojan.Generic@AI.100 (RDML:hs3ZQWBrtxQgLff8fgCO+g)
Ikarus	Trojan.Win32.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CardSpy.PRKJ!tr
BitDefenderTheta	Gen:NN.ZexaF.36196.GuZ@ayctWhk
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (D)

How to remove Trojan.Win32.Wecod.jdpo?

Trojan.Win32.Wecod.jdpo removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X